Installing a RapidSSL SSL Cert on an AWS Load Balancer

Over at CodePen it came time to renew our SSL cert. I dutifully follwed the setup instructions, but I was greeted with this error:

Invalid Public Key Certificate

After talking with the support staff at RapidSSL, I was told to reverse the Intermediate CA Bundle. The example from their instructions looks like this:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
-----BEGIN CERTIFICATE----
Primary Intermediate CA
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
Secondary Intermediate CA
-----END CERTIFICATE-----

Needs to be switched to..

-----BEGIN CERTIFICATE-----
Secondary Intermediate CA
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
Primary Intermediate CA
-----END CERTIFICATE-----

I’m noting this here so in 2016 when we have to renew our SSL Cert, we’ll know what to do.

Comments